Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Avast Web Shield has blocked a harmful webpage or file.... am I infected


  • Please log in to reply
5 replies to this topic

#1 sunwers

sunwers

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:29 PM

Posted 24 December 2015 - 12:02 AM

Hi,

 

My laptop keeps getting a popup from avast stating this below

 

Avast web shield has blocked a harmful webpage or file

 

Object:  http://weath4us.info/qOxXS:f<GM///

Infection:  URL:Mal

C:\users\joseph\AppData\Roaming\CrashRep\GUP.exe

 

Joseph is the user of this laptop.  This popup come up whether I'm browsing the internet or just on my desktop in word or something similar.  I have run spybot and only thing it finds is Browser:cache for internet explorer.  I have windows 10 home on a Toshiba Satellite.  What do I need to do?  Do I have a virus on my laptop?

 

Thanks,

Joseph

 

 

 

Here is the log info

 

 

---------------------------------------------------------------------------

 

SecurityCheck by glax24 v.1.4.0.32 [01.11.15]
WebSite: www.safezone.cc
DateLog: 24.12.2015 00:27:43
Path starting: C:\Users\Joseph\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe
Log directory: C:\SecurityCheck\
IsAdmin: True
User: Joseph
VersionXML: 2.20is-21.12.2015
___________________________________________________________________________

Windows 10(6.3.10586) (x64) Core Lang: English(0409)
Installation date OS: 21.12.2015 01:01:20
LicenseStatus: Office 15, OfficeO365ProPlusR_Subscription1 edition Timebased activation will expire :84194 minutes
LicenseStatus: Windows®, Core edition The machine is permanently activated.
Boot Mode: Normal
Default Browser: C:\WINDOWS\system32\LaunchWinApp.exe
SystemDrive: C: FS: [NTFS] Capacity: [919.4 Gb] Used: [63.3 Gb] Free: [856.1 Gb]
------------------------------- [ Windows ] -------------------------------
Internet Explorer 11.20.10586.0
User Account Control enabled
Automatic download and scheduled installation
Windows Update (wuauserv) - The service is running
Security Center (wscsvc) - The service is running
Remote Registry (RemoteRegistry) - The service has stopped
---------------------------- [ Antivirus_WMI ] ----------------------------
Windows Defender (disabled)
avast! Antivirus (enabled and up to date)
--------------------------- [ FirewallWindows ] ---------------------------
Windows Firewall (MpsSvc) - The service is running
--------------------------- [ AntiSpyware_WMI ] ---------------------------
Windows Defender (disabled and up to date)
avast! Antivirus (enabled and up to date)
---------------------- [ AntiVirusFirewallInstall ] -----------------------
Avast Free Antivirus v.10.4.2233
McAfee SiteAdvisor v.3.7.1.139
-------------------------- [ SecurityUtilities ] --------------------------
Malwarebytes Anti-Malware version 2.2.0.1024 v.2.2.0.1024
McAfee SiteAdvisor v.3.7.1.139
--------------------------------- [ IM ] ----------------------------------
Skype™ 6.18 v.6.18.105 Warning! Download Update
^Optional update.^
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Flash Player 20 NPAPI v.20.0.0.235
Adobe Reader XI (11.0.13)  MUI v.11.0.13
------------------------------- [ Browser ] -------------------------------
Mozilla Firefox 42.0 (x86 en-US) v.42.0 Warning! Download Update
--------------------------- [ RunningProcess ] ----------------------------
C:\Program Files (x86)\Mozilla Firefox\firefox.exe v.42.0.0.5780
C:\Program Files\AVAST Software\Avast\AvastSvc.exe v.10.4.2233.1299
C:\Program Files\AVAST Software\Avast\avastui.exe v.10.4.2233.1305
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe v.2.3.125.0
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe v.3.1.6.0
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe v.3.2.19.0
---------------------------- [ UnwantedApps ] -----------------------------
Host App Service v.0.269.7.714 Warning! Suspected Adware! If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using Malwarebytes Anti-Malware and AdwCleaner (by Xplode). Before uninstallation and scanning it is necessary to consult in the forum where cure is provided for you!!!
----------------------------- [ End of Log ] ------------------------------
 


Edited by sunwers, 24 December 2015 - 12:28 AM.


BC AdBot (Login to Remove)

 


m

#2 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 PM

Posted 24 December 2015 - 12:09 AM

Uninstall Spybot from your machine. Then Download Security Check to your desktop, right click it run as administrator. When the program completes, the tool will automatically open a log file, please post that log here in your next post.

 

Adware Cleaner Scan.

 

Please download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

 

JRT Scan.

Please download Junkware Removal Tool and save it on your desktop.

 

  • Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log is saved to your desktop and will automatically open.
  • Please post the JRT log.
  •  

Adware Removal Tool Scan.

 

Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.

 

 

LOr0Gd7.png

 

Hit Ok.

 

sYFsqHx.png

 

Hit next make sure to leave all items checked, for removal.

 

8NcZjGc.png

 

 

The Program will close all open programs to complete the removal, so save any work and hit OK. Then hit OK after the removal process is complete, thenOK again to finish up. Post log generated by tool.

 

ZHP Scan.

Please download Zhp Cleaner  to your desktop.  Right Click the icon and select run as administrator.

 http://nicolascoolman.com/download/zhpcleaner

 

 

2. Once you have started the program, you will need to click the scanner button.

EgsT69u.png

The program will close all open browsers!

3. Once the scan is completed, the you will want to click the Repair button.

6QJjV50.png

At the end of the process you may be asked to reboot your machine. After you reboot a report will open on your desktop.

Copy and paste the report here in your next reply.

 Zemana Scan

 

 

Run a full scan with Zemana AntiMalware!

Install and select deep scan.

jdmyscF.jpg

Remove any infections found.

Then click on the icon in the pic below.

DOLGyto.jpg

Double click on the scan log, copy and paste here in your reply.



#3 sunwers

sunwers
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:29 PM

Posted 24 December 2015 - 12:28 AM

posted security check log above



#4 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 PM

Posted 24 December 2015 - 12:36 AM

posted security check log above

 

 

Alright, you see what needs to be updated then. :)



#5 sunwers

sunwers
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:29 PM

Posted 24 December 2015 - 12:45 AM

yeah i see it and fixed it. 

 

thanks

 

:-)



#6 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 PM

Posted 24 December 2015 - 01:12 AM

K, post the other logs when you are ready. Make sure and make a new post, not edit it into another for new logs.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users